Purpose and scope
Risk management is the process used to identify and manage risks associated with a county association supporting the corporate needs of town and parish councils and parish meetings in Suffolk. The Board recognise that some risks cannot be eliminated and have adopted a risk-based approach that is systematic and focussed as a management framework.
Responsibilities
The SALC Board owns this policy and see it as a key part of their governance role. They will review annually and update as necessary. On a day-to-day basis all members of the team shall be aware of this policy and take responsibility for following procedures and processes and highlighting any updates or amendments necessary to ensure continual improvement.
Risk-based approach
Risk control is the process of taking action to minimise the likelihood of the risk occurring and in as much as is possible reducing the severity of the consequences should it occur. This will be achieved by using a range of methods including, elimination, reduction, transfer, sharing, insuring or acceptance.
Types of risks identified
| Category | Description | Risk level | Management | Assessed | Review date |
| Heath and Safety | slips and trips, manual handling, desk station | Low | Staff awareness | Annually | August 2025 |
| Service delivery | Loss of IT and telephony | Low | Business continuity plan | Annually | August 2025 |
|
|
Cyber attack | Medium | Software and training | Annually | August 2025 |
|
|
Incorrect advice or guidance (technical, internal audit, training, payroll) admin error in processing information or request | Medium | Procedures, support, training, access to experts. Insurance. | Annually | August 2025 |
| People | Loss of staff | Low |
Business continuity plan, procedures, succession planning
|
Annually |
Au
gust 2025
|
| Customers | Loss of members | Low | Reserves policy | Annually | August 2025 |
| Facilities | Loss of premises | Low | Ability to work remotely | Annually | August 2025 |
| Financial | Loss of grant funding from SCC | Medium | Reserves, liasion with new council(s), establish contingency | Annually |
April 2026
|
| Regulatory | SALC website WCAG 2.2 compliance | low | Work with supplier on areas of non-compliance | Quarterly |
April 2026
|
|
Reputation
|
Stability of Norfolk ALC | low/medium | collaboration | quarterly | April 2026 |
| Organisation | LGR/Devolution | medium | regular reviews are required as the impact of this is unknown | quarterly | April 2026 |
Risk profile
The current risk profile is medium-low with no high risks identified.
Changes to this policy
This is a controlled document and is the responsibility of the SALC Board and is reviewed annually.